Re: Strange IPsec behaviour between SRXs

Gentlemen.

I've reconfigured the port on the SRX-01 from "vlan-tagging" to "port mode trunk" and reconfigured the vlans also.

Here is Interface config:

Den@SRX-01# show interfaces fe-0/0/7
unit 0 {
    family ethernet-switching {
        port-mode trunk;
        vlan {
            members [ Contoso Adatum INTERNAL ];
        }
    }
}

Here is Vlan config:

Contoso {
    description ISP-Adatum;
    vlan-id 3;
    l3-interface vlan.3;
}
Adatum {
    description ISP-Contoso;
    vlan-id 2;
    l3-interface vlan.2;
}
INTERNAL {
    description "INTERNAL - DMZ";
    vlan-id 5;
    l3-interface vlan.5;
}
vlan1 {

    description "Default-vlan";
    vlan-id 10;
    l3-interface vlan.1;
}

Here is vlan-interface config:

unit 1 {
    family inet {
        address 192.168.1.1/24;
    }
}
unit 2 {
    description ISP-Contoso;
    family inet {
        address 10.10.10.10/24;
    }
}
unit 3 {
    description ISP-Adatum;
    family inet {
        address 11.11.11.11/27;
    }
}
unit 5 {
    description "Internal - DMZ 3/24";
    family inet {
        address 192.168.3.24/24;
    }
}

No result.

The behaviour is exactly the same as I described above.

Flow log from 3.21 to 77.7 attached.

Please, take a look.

Thanks,

Den.